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Q&A For Serverdown 
Squid ignoring hosts file (using SquidMan on Mac) 


I installed SquidMan 3.1 on my Mac, and it works fine. But I really need it to redirect some of the traffic using my hosts file, and it seems to be 
ignoring it no matter where I put it. 


So far I've tried: 


o Adding a hosts _file /etc/hosts directive on the configuration template via the SquidMan UI. 

o Adding the same directive on the configuration file located at /usr/local/squid/etc/squid.conf 

o Creating a copy of my hosts file in /usr/local/squid/etc/ and updating the directives to match the new location. 
What am I doing wrong? 


Answers(33) 


oops :P Ok, did an nbtstat -R and nbtstat -RR and nbtstat -r and then nbtstat -c (and it said "no names in cache) — cmcculloh Aug 6 '09 at 15:45 


Try deleting the file and create a new one, w/o copy/pasting. Maybe some texteditor inserted odd characters in there (UTF8). — olefebvre Aug 7 
‘09 at 9:47 


And now I either installed BIND wrong, or my computer is ignoring that too, because it isn't working either... — cmcculloh Aug 6 '09 at 15:16 


Every time I use the host file for my DNS entries (which is always) I turn off(disable) the DNS service (services.msc) running natively. Then do a 
ipconfig /flushdns if that fails reboot said server/desktop and that will clear the cache. What DNS entries are not in the host file the server/desktop 
will resort to the Default DNS settings of the Network Interface that have been setup. This also allows for testing different firewalls and such. 


Yes, /etc/ is the same as /private/etc/ — luchomolina Apr 3 '12 at 20:37 


According to http://technet.microsoft.com/en-us/library/bb727005.aspx it could be in your local NETBIOS name cache. You can use nbtstat ( 


http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/nbtstat.mspx?mfr=true) to query/purge this cache. 
and it still didn't work btw — cmcculloh Aug 6 '09 at 15:48 


Yes, actually, I found out there is a corporate proxy that is intercepting my requests and responding to them. Somehow it was bypassing my 
hosts file. If there was an entry in the corporate proxy it was overriding my local hosts file entry. While this answer didn't really tell "how" to fix 
the problem, it did identify the actual root cause of the problem (it's not the firewall...) — cmcculloh Feb 15 '10 at 13:19 


1: Reply from 172.17.1.107: bytes=32 time 


Are you sure you are editing RIGHT hosts file? Usually it located in 


%SystemRoot%\system32\drivers\etc\hosts 


The location on the hosts file on Mac OS X is /private/etc/hosts 


http://decoding.wordpress.com/2009/04/06/how-to-edit-the-hosts-file-in-mac-os-x-leopard/ 


This fixed it for me. I just added the Users group directly to the hosts file, flushed the cache, and the hosts file was immediately respected again. 
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— user51928 May 15 '13 at 20:44 


when I issue the "nbstat" command, I get "'nbstat' is not recognized as an internal or external command, operable program or batch file" — 
cmcculloh Aug 6 '09 at 15:23 


After trying many different suggested solutions, I checked the security on the ‘etc’ folder and compared its permissions to that of the ‘es-ES’ 
folder, and found that the group Users did not have Read & execute rights like they did on the other. After taking ownership (again) of the ‘etc’ 
folder, I granted group Users Read & execute permissions, and had them inherited by the folder contents. That fixed the problem for me- 
whatever part of the system queries the hosts file evidently is under the restrictions of the User group. I must have removed the group's 
permissions accidentally at some point when trying to modify the hosts file. 


Could you check your permission on the host file ? Try to use an FQDN for the hostfile "wiki" entry. 


Firewall Responding To Pings? 
This is a long shot from the ip address you gave, but what happens when you ping the new ip directly, does that work? 


The reason I ask, if 10.0.36.100 happens to be a firewall that responds to the ping, it will say reply from that, even though you were pinging a 
different IP.... 


Big Hosts File? 
Also, this got me and another IT person once, there were lots of blank lines in the window hosts files, and then entries way down below -- we 
didn't noticed the scroll bar :-) 


Is the hosts file really the hosts file? 
Lastly, look in the registry and make sure the host file is where you think it is, the following key specifies where the actual hosts file is: 


\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath 


Yeah, everything in Imhosts.sam is commented out and there's only the two lines I specified in the original question in my hosts file... — 
cmcculloh Aug 6 '09 at 15:20 


Any chance you are using a proxy server for browsing? If so it might be that the proxy server is resolving the dns name for you. 
And thats why you get different results in a commandline with ping as opposed to the browser. 


Off chance traffic is intercepted and changed. Very off chance... 


The location on the hosts file on Mac OS X is /private/etc/hosts 


http://decoding.wordpress.com/2009/04/06/how-to-edit-the-hosts-file-in-mac-os-x-leopard/ 


Yes, /etc/ is the same as /private/etc/ — luchomolina Apr 3 '12 at 20:37 


nbtstat, not nbstat - you're missing the first "t"... :) — Jimmy Shelter Aug 6 '09 at 15:25 


what happens when you create a new entry for that ip, say 172.17.1.107 wikitest? — shufler Aug 6 '09 at 17:00 


@luchomolina technically its not, /etc is just a symlink that has been hidden w/ chflags hidden — Hawken Apr 21 '12 at 2:23 


have you checked hosts and Imhosts.sam? 


Try to flush your DNS Cache with Start -> Run... 
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ipconfig /flushdns 


Also try to deactivate NetBIOS and LMHOSTS for your Network Adapter. You can change the settings in the TCP/IP Properties of the used 
Network Connection, under Advanced -> WINS. 


Turns out that my corporate DNS was being hit before my hosts file. So I: 


1. Opened my TCP/IP Properties (Control Panel > Network Connections > Local Area Connection > Properties > (scroll down) Internet Protocol 
(TCP/IP) > Properties. 


2. Clicked "Use the following DNS server addresses:" (Instead of Obtain DNS server address automatically) 

3. entered "172.0.0.1" and "172.0.0.2" (and clicked ok) 

Now my hosts file works just fine... From the command line. However, if I put an entry in for www.google.com that points to 172.17.1.107, when 
I ping it from the command line, it returns from the IP address I specified in the hosts file. But if I hit it from the browser, it still shows me Google 
instead of my local site. But if I put an entry in for "fredspc" that points to 172.17.1.107 and hit that from the browser, it takes me to 
172.17.1.107. 


I figured this out because if I entered "tedspc" in my hosts file (i.e. something that would never resolve) and gave it an IP address and pinged it, 
it would resolve to that IP address. The problem was that www.wiki.com and anything else I was entering into my hosts file had an entry in my 
corporate DNS server, which was causing it to resolve, which meant it never looked at my hosts file (because the corporate DNS server gets 
looked at first before the hosts file). So I've cut the corporate DNS out of the command prompt loop, but not out of the browser loop I guess... 
Any ideas? 


Perhaps your web browsers are configured with a proxy server? — Oskar Duveborn Dec 30 '09 at 14:59 


I just got caught up changing C:\windows\system32\drivers\etc\hosts when %SystemRoot% was defined as C:\WINNT instead of 
C:\windows... I don't know why this particular server had an entire windows installation in both C:\windows and C:\winnt but at least I don't 
feel insane anymore. 


I feel kind of dumb but it's just another quick check for other people who run into this problem! 


When i had the problem it was an easy fix. I chose to not use proxy on that IP(Under proxy settings in Firefox) This fix may not apply to your 
problem(Firewall might be blocking outgoing HTTP without proxy etc). It may also be a bitch roll out to multiple machines, if you dont have 
centralized management of Mozilla profiles. I can't answer for IE since we dont use it. — artifex Feb 16 '10 at 8:30 


Deleting the original file on windows and replacing it with a new one is important! 


I know the question has been answered, but it's clear that there are many different reasons and possible solutions. What did the trick for me was 
to delete the file, rather than to overwrite it. 


I also know that @olefebvre already posted something similiar, but I didn't recognize it with its abbreviations and it's not (only) related to odd 
characters, it is to bring windows to recognize the file at all. 


What should the permissions be (right now the file is not read only and all permissions are set to allow for all users)? I tried setting to 
www.wiki.com and it still didn't work. (I changed the line to 172.17.1.107 www.wiki.com) Then I opened up my command prompt and tried 
pinging www.wiki.com and it returned "Pinging www.wiki.com [70.35.23.23] with 32 bytes of data" but then it said "Request timed out" three 
times. Then anything I tried to ping returned Request timed out. I'm in the middle of a BIND install now to try and fix this, I don't know if that 
would effect the pings... — cmcculloh Aug 6 '09 at 14:56 


@luchomolina technically its not, /etc is just a symlink that has been hidden w/ chflags hidden — Hawken Apr 21 '12 at 2:23 


Hi. Good to hear that you have a workaround. But as much as I know the hosts file should always be used first to make dns lookups prior to 
every entry in your dns server list. Is it possible to deactivate the lookup in the hosts file completely with some dhcp - options? Maybe you can 
add your corporate DNS Servers as third and fourth entry in your dns server list. — grub Aug 7 '09 at 14:53 


Related 


/etc/hosts configuration file is ignored when behind a squid proxy 
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squid configuartion on MAC OSX lion 


Use proxy like an /etc/hosts file 


/etc/hosts configuration file is ignored when behind a squid proxy 


Squid proxy server ignoring hosts file :( 


squid Which url in my file is matching 


initialize squid 


Redirect Addresses to localhost by Pattern on Mac OS X 


Macs behind a proxy, using squid for SSL and HTTP traffic 


Local transparent proxy with ipfw and squid 


initialize squid 


Squid ignoring hosts file (using SquidMan on Mac) 


Local transparent proxy with ipfw and squid 
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squid configuartion on MAC OSX lion 


Redirect Addresses to localhost by Pattern on Mac OS X 


Macs behind a proxy, using squid for SSL and HTTP traffic 


HOSTS file being ignored 


Squid proxy server ignoring hosts file :( 


squid Which url in my file is matching 


Use proxy like an /etc/hosts file 


HOSTS file being ignored 
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